Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6x5p-r76q-h5g9

Опубликовано: 01 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.

EPSS

Процентиль: 31%
0.00369
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 2 месяцев назад

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.

CVSS3: 6.5
redhat
около 2 месяцев назад

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.

CVSS3: 7.5
nvd
около 2 месяцев назад

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer access in free_reader_states functions.

CVSS3: 7.5
debian
около 2 месяцев назад

FreeRDP before 3.29.0 contains a null pointer dereference vulnerabilit ...

CVSS3: 7.5
fstec
2 месяца назад

Уязвимость функций free_reader_states_a() и free_reader_states_w() RDP-клиента FreeRDP, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 31%
0.00369
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-476